Utah Code 53E-9-307. Securing and cataloguing student data

53E-9-307. Securing and cataloguing student data.
In accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the state board shall make rules that:

(1)

using reasonable data industry best practices, prescribe the maintenance and protection of stored student data by:

(a)	the state board;

(b)	a local school board;

(c)	a charter school governing board;

(d)	a school district;

(e)	a charter school; or

(f)

the Utah Schools for the Deaf and the Blind. See Utah Code 53E-9-301

Metadata dictionary: means a record that:

(a)	defines and discloses all personally identifiable student data collected and shared by the education entity;

(b)

comprehensively lists all recipients with whom the education entity has shared personally identifiable student data, including:

(i)	the purpose for sharing the data with the recipient;

(ii)	the justification for sharing the data, including whether sharing the data was required by federal law, state law, or a local directive; and

(iii)

how sharing the data is permitted under federal or state law; and

(c)

without disclosing personally identifiable student data, is displayed on the education entity's website. See Utah Code 53E-9-301

State board: means the State Board of Education. See Utah Code 53E-1-102

Student data: means information about a student at the individual student level. See Utah Code 53E-9-301

Third-party contractor: means a person who:

(a)	is not an education entity; and

(b)	pursuant to a contract with an education entity, collects or receives student data in order to provide a product or service, as described in the contract, if the product or service is not related to school photography, yearbooks, graduation announcements, or a similar product or service. See Utah Code 53E-9-301
(a)	an education entity;

(b)	the Utah Registry of Autism and Developmental Disabilities, described in Section 26B-7-115, for student data obtained under Section 53E-9-308; and

(c)	a third-party contractor; and

(2)	state requirements for an education entity’s metadata dictionary.

Amended by Chapter 328, 2023 General Session